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In the Claims: 



1. (Currently /Amended) A method for providing computer-based 
authentication utilizinq utilization absolute keystroke timing 
biometrics, the method comprising the acts of: 

obtaining a first absolute keystroke timing data of a user 
while the user types a passphrase; 

responsive to said obtained absolute keystroke timing data, 
analyzing and abstracting the absolute keystroke timing data into 
a keystroke timing data template; and 

obtaining a second and subsequent absolute keystroke timing 

data of a user while the user types a passphrase and responsive to 
said received sec ond and subsequent absolute keystroke timing 
data, mergi ng said second and subsequent absolute keystroke timing 
data with said key stroke timing data template to create an 
updated, merged keystroke timing data template; and 

verifying said second and subsequent absolute feto^e 
keystroke timings data against said updated, merged keystroke 
timing data t he non repudia t e ] -i-pmpi at** . 

2. (Currently Amended) The method according to claim 1 further 
including the acts of receiving said second and subsequent future 
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absolute keystroke timing data; and updating said keystroke timing 
data template with the second and subsequent fe fe^e-absolute 
keystroke timings data. 



3. (Currently Amended) The method according to claim 2 wherein 
the absolute keystroke timing data and the second and subsequent 
future absolute keystroke timing data include a serialized set of 
keystroke timings. 



4. (Original) The method according to claim 3 wherein said 
serialized set of keystroke timings is selected from the group 
consisting of any timing differential between one key's depressi< 
and any key's release, one key's depression to any other key's 
depression, one key's release to any other key's depression, and 
one key's release to any other key's release. 

5. (Currently Amended) The method according to claim 4 further 
including the act of performing nonce profiling of the absolute 
keystroke timing data and the second and subsequent £afeure 
keystroke timing data. 
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6. (Original) The method according to claim 5 further including 
the act of configuring the nonce profiling into a new passphrase. 

7. (Currently Amended) A method for providing computer-based 
authentication utilizing u tilization absolute keystroke timing 
biometrics, the method comprising the acts of: 

predetermining a passphrase for plaintext authentication- 
typing the predetermined passphrase for plaintext 
authentication; 

responsive to said act of typing, deriving absolute keystroke 
characteristics including a plurality of initial typing data 
timings , wherein said keystroke characteristics are variable ; 

responsive to said act of deriving keystroke characteristics^ 
including-obtaining a plurality of initial absolute typing data 
timings, abstracting the initial absolute typing data timings into 
a template for verification at a later time; 

receiving additional typing and determining the absolute 
typing data timings of said additional typing; 

responsive to said act of receiving additional typing data 
timings, verifying the additional typing data timings using said 
initial typing data timings; 
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responsive to said act of verifying, updating said existing 
template by merging a d din q the additional data timings as a 
signature to the existing template if the verification is 
approved, thereby increasing the number of data timings in the 
template; 

breaking down the additional typing data timings of the 
additional typing into nonces; and 

responsive to said breaking down of said additional typing 
data timings, reassembling the nonces into a new passphrase. 

8. (Original) The method according to claim 7 wherein the 
keystroke characteristics include any timing differential between 
one key's depression and any key's release, one key's depression 
to any other key's depression, one key's release to any other 
key's depression, and one key's release to any other key's 
release . 

9. (Original) The method according to claim 8, further including 
the act of calculating total calculation points. 



(Original) The method according to claim 7, responsive to 
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said abstracting act, further comprising the acts of: 

calculating a set of levels to be N-l, wherein N is the 

length of the passphrase; 

responsive to said calculating act, calculating a mean 

average, variance, and standard deviation for each calculation 

point over a number of samples; 

determining a normalize weighting at each said set level 

based on a spread from a largest percent error to a smallest 

percent error; 

calculating the multiplication factor for weighting as a sum 
of all weights for the entire passphrase; 

calculating the multiplication factor for weighting as a sum 
of all weights for each level in the passphrase; 

creating a template by storing each calculation point, mean 
average, standard deviation, percent error, weight for an index 
normalized over the entire passphrase, and weight for an index 
normalized within the level; 

responsive to said act of calculating the multiplication 
factor for weighting as the sum of all weights for the each level 
in the passphrase, storing the multiplication factor for weighting 
as the sum of all weights for each level in the passphrase at each 
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breadth level; and 

responsive to said act of calculating the multiplication 
factor for weighting as a sum of all weights for each level in the 
passphrase, storing the multiplication factor for weighting as the 
sum of all weights for the entire passphrase and the data timing 
at the highest level. 

11. (Original) The method according to claim 8 wherein the total 
number of timings are determined as 2N-1, and wherein N is a 
number of key presses. 

12. (Original) The method according to claim 10, further 
including the acts of: 

adjusting the additional typing data timings to match the 
data timings in the template; 

calculating a new mean average, variance, standard deviation, 
and percent error using an incremental standard deviation formula; 

recalculating the normalize weighting within each level; 

recalculating the normalize weighting of each calculating 
point; 

recalculating the multiplication factor for weighting as the 
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sum of all weights for the entire passphrase; 

recalculating multiplication factor for weighting as the sum 
of all weights for each level in the passphrase; 

recreating the mean average, standard deviation, percent 
error, weight for the index normalized over the entire passphrase, 
and the weight for the index normalized within the level for the 
template; 

storing the multiplication factor for weighting as the sum of 
all weights for the each level in the passphrase at each breadth 
level; and 

storing the multiplication factor for weighting as the sum of 
all weights for the entire passphrase and the data timing at the 
highest level. 

13. (Original) The method according to claim 7 wherein the 
verifying act includes the acts of: 

interpreting a raw score as a value, wherein the smaller the 
value, the higher the confidence; 

responsive to said interpreting act, calculating a threshold; 

and 

inverting the value to obtain a translated score. 
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14. (Original) The method according to claim 7 further comprising 
the act of refining the template with additional nonces. 

15. (Original) The method according to claim 7 wherein the 
method is performed using JAVA applet /servlet pair technology. 

16. (Original) The method according to claim 7 wherein the method 
is performed using GINA technology. 

17. (Original) The method according to claim 7 further including 
the act of requiring purchasers of products to perform the typing 
act . 

18. (Original) The method according to claim 7 further including 
the act of requiring a person enrolled in online educational 
programs to perform the typing act prior to accessing online 
educational materials. 

19. (Original) The method according to claim 7 further 
including the act of enhancing RADIUS protocols with the method. 
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20. {Currently Amended) A method for providing computer-based 
authentication utilization keystroke biometrics, the method 
comprising the acts of: 

obtaining a first absolute keystroke timing data of a user 
while the user types a passphrase, wherein said absolute keystroke 
timing data is selected from the group consisting of any timing 
differential between one key's depression and any key's release, 
one key's depression to any other key's depression, one key's 
release to any other key's depression, and one key's release to 
any other key's release^; 

responsive to said obtained absolute keystroke timing data, 
analyzing and abstracting the absolute keystroke timing data into 
a keystroke timing data template; 

. obtaining a second and subsequent absolute keystroke timing 

data of a user while the user types a passphrase, and responsive 
to said received second and subsequent absolute keystroke timing 
data, merging said second and subsequent absolute keystroke timing 
data with said keystroke timing data template to create an 
updated, merged keystroke timing data template; 

verifying said second and subsequent absolute f afea^e 
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keystroke timing data against said updated, merged keystroke 
timing data the non repudiat ed template ; 

receiving future keystroke timing data; 
updating paid keystroke data template with the future 
keystroke timings data; 

performing nonce profiling of the absolute keystroke timing 
data and the second and subsequent absolute f uture -keystroke 
timing data; and 

configuring the nonce profiling into a new passphrase. 

21. (Currently Amended) A method for providing computer-based 
authentication, the method comprising the acts of: 
obtaining a first data sample; 

responsive to said obtained data sample, analyzing and 
abstracting the first data sample into a non-repudiated data 
sample template; and 

obtaining a second and subsequent absolute keystroke timing 

data of a user while the user types a passphrase and responsive to 
said received second and subsequent absolute keystroke timing 
data, merging said second and subsequent absolute keystroke timing 
data with said keystroke timing data template to create an 



In re: John C. Checco 
Filed: January 30, 2004 
Serial No. : 10/768, 616 
Page 12 

updated, merged keystroke timing data template; and 

verifying said second and subsequent absolute future data 
samples data against the non-repudiated data sample template to 
determine consistency or inconsistency between the future 
subsequent absolute data samples as compared to the non-repudiated 
data sample template. 



